build(deps): bump the container-bases group across 1 directory with 3 updates

[dependabot]

Bumps the container-bases group with 3 updates in the / directory: astral-sh/uv, python and nginxinc/nginx-unprivileged.

Updates astral-sh/uv from 0.12.3 to 0.12.4

Release notes

Sourced from astral-sh/uv's releases.

0.12.4

Release Notes

Released on 2026-08-13.

Enhancements

• Prefer post-quantum key exchange and enable opt-in TLS diagnostics (#21054)
• Accept whitespace before versions in noncompliant wildcard comparisons such as Requires-Python: >= 3.5.* (#21012)
• Report a specific error when a PEP 723 closing tag contains trailing whitespace or other content (#20944)
• Omit source-span carets from diagnostics for empty PEP 508 requirements (#21094)

Preview features

• Add uv check --no-install-project and respect UV_NO_INSTALL_PROJECT to install dependencies without building or installing the project (#21085)
• Make the ty subprocess invoked by uv check honor uv's color and progress settings, including quiet mode (#21086)

Performance

• Speed up resolutions with long runs of unavailable package versions by coalescing gaps in the resolver's version ranges (#20804)
• Speed up Simple API parsing by deserializing PyPI and Pyx file metadata directly (#21041)

Bug fixes

• Use windowed pythonw.exe launchers for virtual environments created from managed Python minor-version links (#19235)
• Allow uv lock to proceed when .venv is an unusable project environment (#21068)
• Respect fork-strategy when ordering forks created from environments or existing lockfile resolution-markers (#21000)
• Preserve consecutive wildcard Python minor-version exclusions such as !=3.11.*, !=3.12.* in uv.lock (#21045)
• Preserve inline comments on the final item in dependency arrays when uv add updates it (#21008)
• Recover from stale base-interpreter cache metadata when an existing virtual environment exposes a version mismatch (#21073)
• Prevent interpreter cache reuse across different PYTHONEXECUTABLE and __PYVENV_LAUNCHER__ overrides (#21075)
• Show standard styling, usage guidance, and line termination for invalid uv version --bump values (#21076)

Install uv 0.12.4

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.4/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.4/uv-installer.ps1 | iex"

Download uv 0.12.4

| File | Platform | Checksum |

... (truncated)

Changelog

Sourced from astral-sh/uv's changelog.

0.12.4

Released on 2026-08-13.

Enhancements

• Prefer post-quantum key exchange and enable opt-in TLS diagnostics (#21054)
• Accept whitespace before versions in noncompliant wildcard comparisons such as Requires-Python: >= 3.5.* (#21012)
• Report a specific error when a PEP 723 closing tag contains trailing whitespace or other content (#20944)
• Omit source-span carets from diagnostics for empty PEP 508 requirements (#21094)

Preview features

• Add uv check --no-install-project and respect UV_NO_INSTALL_PROJECT to install dependencies without building or installing the project (#21085)
• Make the ty subprocess invoked by uv check honor uv's color and progress settings, including quiet mode (#21086)

Performance

• Speed up resolutions with long runs of unavailable package versions by coalescing gaps in the resolver's version ranges (#20804)
• Speed up Simple API parsing by deserializing PyPI and Pyx file metadata directly (#21041)

Bug fixes

• Use windowed pythonw.exe launchers for virtual environments created from managed Python minor-version links (#19235)
• Allow uv lock to proceed when .venv is an unusable project environment (#21068)
• Respect fork-strategy when ordering forks created from environments or existing lockfile resolution-markers (#21000)
• Preserve consecutive wildcard Python minor-version exclusions such as !=3.11.*, !=3.12.* in uv.lock (#21045)
• Preserve inline comments on the final item in dependency arrays when uv add updates it (#21008)
• Recover from stale base-interpreter cache metadata when an existing virtual environment exposes a version mismatch (#21073)
• Prevent interpreter cache reuse across different PYTHONEXECUTABLE and __PYVENV_LAUNCHER__ overrides (#21075)
• Show standard styling, usage guidance, and line termination for invalid uv version --bump values (#21076)

Commits

• 77803aa Bump version to 0.12.4 (#21105)
• a82ecc9 Use test contexts for cache file-count filters (#21104)
• 2c3f6d0 Improve regression coverage for related bug manifestations (#21101)
• d81ed9d improve fix-bug automations PR title/summary (#21100)
• aad7fc2 Heal interpreter metadata cache entries when creating a virtual environment i...
• 08551f7 Use shared helpers for cache filesystem tests (#21099)
• 791e7a9 Handle promoted regression tests during automated bug fixes (#21093)
• 23f497e Avoid orphaned caret for empty PEP 508 requirements (#21094)
• 09d1aa5 Forward uv check terminal settings to ty (#21086)
• e6d90a6 Authorize issue-comment context persistence (#21091)
• Additional commits viewable in compare view

Updates python from 3.14.6-alpine3.23 to 3.14.7-alpine3.23

Updates nginxinc/nginx-unprivileged from 1.30.4-alpine to 1.31.3-alpine

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions